Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ITXp3Z-Lv8FV2QV0HSCj__R3rSE.roa
File: ITXp3Z-Lv8FV2QV0HSCj__R3rSE.roa (raw, json)
Hash identifier: EBJHuxH97F6VwfBCzTaQ/XE45ZXKdSbLWlxmncC3Gnw=
Subject key identifier: 21:35:E9:DD:9F:8B:BF:C1:55:D9:05:74:1D:20:A3:FF:F4:77:AD:21
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B989E01E5022B264DCCB2E65BF24
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ITXp3Z-Lv8FV2QV0HSCj__R3rSE.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206744
IP address blocks: 45.86.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 15:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b9:89:e0:1e:50:22:b2:64:dc:cb:2e:65:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2135e9dd9f8bbfc155d905741d20a3fff477ad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:cb:a0:81:7a:ac:81:46:29:51:2c:6c:20:
4f:6d:74:39:e3:a3:9d:70:d5:7f:5f:4a:3f:37:7f:
8c:44:70:ff:c7:de:08:02:b0:98:80:ed:76:c3:79:
08:7c:99:4c:9b:0f:d9:f8:e4:a3:4e:9b:db:87:71:
0f:35:33:a8:2a:29:08:7e:38:69:f9:ad:ab:e6:ed:
f1:b0:d4:76:b6:bb:16:bc:39:71:25:a6:14:06:bc:
b9:ac:89:17:88:fe:c3:65:ef:28:b0:72:a5:b0:39:
a6:03:8d:1e:a1:ab:6a:d8:a3:6f:e3:b9:3f:6f:25:
5b:68:59:a9:51:f7:26:99:eb:5d:d4:8b:70:49:93:
ab:19:3f:4a:9d:de:fe:fa:19:1e:50:a3:d8:4f:a2:
68:ba:6d:af:64:fe:b6:01:a6:a2:a4:ad:7c:c5:d1:
a3:85:de:e5:09:b5:95:8b:2f:19:55:ce:d1:39:cb:
66:5c:c2:4c:61:28:e6:2d:fa:ac:12:88:11:78:20:
7e:7f:ad:f5:81:92:4c:cc:f6:0e:06:4d:b9:87:68:
df:79:52:3e:f4:5a:f8:21:54:00:22:3a:27:3e:18:
ea:f7:d6:2d:36:0f:38:ae:37:a4:84:e8:bb:a4:c5:
05:f7:ca:f4:cf:0d:ed:ce:39:18:1b:4b:6b:0c:41:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:E9:DD:9F:8B:BF:C1:55:D9:05:74:1D:20:A3:FF:F4:77:AD:21
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ITXp3Z-Lv8FV2QV0HSCj__R3rSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d6:13:6b:5d:ce:d6:85:92:75:de:48:1f:bb:d7:9d:6d:ae:
06:c2:e3:db:f6:70:6d:a0:3e:7b:1a:e1:32:b9:a3:5c:f4:22:
68:ee:79:b3:53:13:da:de:c4:79:6b:92:0c:eb:96:c6:18:b2:
a1:9b:cb:53:ba:93:18:ee:41:fc:cb:af:78:80:7a:f4:e8:a1:
f2:ae:42:55:99:13:dc:b5:f8:3a:c0:97:42:96:7b:f6:10:84:
64:21:de:e9:69:0f:4c:9a:d8:12:f4:06:75:59:3c:6a:db:3d:
1f:86:68:4d:9d:18:79:78:f1:d0:4d:85:9d:12:25:37:f4:2c:
2b:1f:56:60:31:64:cd:f1:e9:79:ea:a1:6d:cd:a2:83:0d:8e:
e8:57:f7:b3:3b:04:47:5b:82:a0:5d:30:b2:94:e5:cb:c8:16:
a9:07:b4:38:b3:42:e1:b7:04:08:43:95:f2:bc:b5:b8:25:9d:
f7:25:32:e6:d8:8d:53:68:d6:fa:c2:27:a5:19:3e:48:43:dd:
f6:37:f2:42:36:12:23:e9:01:2d:03:cb:cb:f3:c6:6b:9e:b5:
c9:54:d4:81:8c:5b:39:5e:43:12:fa:1e:05:d9:3a:80:26:11:
58:26:4c:70:0a:2a:71:22:f5:d7:4f:24:e4:a6:52:90:2a:80:
90:45:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org